title: A conceptual security framework for personal health records (PHRs).
abstract: Electronic personal health record (PHR) is a citizen-centric information tool that allows citizens to control their personal information. However, an ideal PHR should also allow citizens to connect with their formal and informal caregivers (e.g. a family member, a caregiver) and together manage citizen health and social information. This introduces specific challenges in terms of security since multiple parties make entries and require access to PHR data. Since citizens are typically non-security and non-domain experts is considered impossible to control all this information. To this end, this paper presents a conceptual security framework for the employment of an attribute-based PHR access control policy that is continually updated according to providers' local security policies and individual professionals and citizen sharing preferences.
authors.affiliation: Department of Digital Systems, University of Piraeus, Piraeus, Greece.
authors.forename: Mikaela
authors.initials: M
authors.lastname: Poulymenopoulou
authors.forename: Despina
authors.initials: D
authors.lastname: Papakonstantinou
authors.forename: Flora
authors.initials: F
authors.lastname: Malamateniou
authors.forename: Andriana
authors.initials: A
authors.lastname: Prentza
authors.forename: George
authors.initials: G
authors.lastname: Vassilacopoulos
mesh_terms: D016494:Computer Security; D003219:Confidentiality; D003258:Consumer Behavior; D055991:Health Records, Personal; D016347:Medical Records Systems, Computerized / Q000458:organization & administration*; D017146:Models, Organizational; D010358:Patient Participation